[ 38.705083][ T65] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.715760][ T65] veth1_macvtap: left promiscuous mode [ 38.721489][ T65] veth0_macvtap: left promiscuous mode [ 38.727252][ T65] veth1_vlan: left promiscuous mode [ 38.732609][ T65] veth0_vlan: left promiscuous mode [ 38.812967][ T65] team0 (unregistering): Port device team_slave_1 removed [ 38.825548][ T65] team0 (unregistering): Port device team_slave_0 removed [ 38.835891][ T65] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 38.848529][ T65] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 38.881196][ T65] bond0 (unregistering): Released all slaves Warning: Permanently added '10.128.1.242' (ECDSA) to the list of known hosts. 2023/02/28 13:05:29 ignoring optional flag "sandboxArg"="0" 2023/02/28 13:05:29 parsed 1 programs 2023/02/28 13:05:29 executed programs: 0 [ 54.236397][ T4361] Bluetooth: hci0: Opcode 0x c03 failed: -110 [ 56.329614][ T48] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 56.337106][ T48] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 56.344457][ T48] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 56.352552][ T48] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 56.360010][ T48] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 56.367250][ T48] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 56.419618][ T5501] chnl_net:caif_netlink_parms(): no params data found [ 56.443461][ T5501] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.450654][ T5501] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.457773][ T5501] bridge_slave_0: entered allmulticast mode [ 56.464003][ T5501] bridge_slave_0: entered promiscuous mode [ 56.470893][ T5501] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.477991][ T5501] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.485051][ T5501] bridge_slave_1: entered allmulticast mode [ 56.491469][ T5501] bridge_slave_1: entered promiscuous mode [ 56.504868][ T5501] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.514928][ T5501] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.531398][ T5501] team0: Port device team_slave_0 added [ 56.537839][ T5501] team0: Port device team_slave_1 added [ 56.549884][ T5501] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 56.556928][ T5501] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.582966][ T5501] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 56.594311][ T5501] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 56.601255][ T5501] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.627237][ T5501] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 56.648720][ T5501] hsr_slave_0: entered promiscuous mode [ 56.654756][ T5501] hsr_slave_1: entered promiscuous mode [ 57.334284][ T5501] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 57.343638][ T5501] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 57.354687][ T5501] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 57.364981][ T5501] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 57.382302][ T5501] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.389429][ T5501] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.397157][ T5501] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.404221][ T5501] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.438006][ T1761] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.446206][ T1761] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.462922][ T5501] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.474890][ T1761] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 57.483623][ T1761] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 57.494671][ T5501] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.504629][ T1761] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 57.515057][ T1761] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 57.523753][ T1761] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.530875][ T1761] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.547003][ T1761] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 57.555836][ T1761] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 57.564703][ T1761] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.571820][ T1761] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.579649][ T1761] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 57.588208][ T1761] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 57.597861][ T1761] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 57.608635][ T1761] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 57.623590][ T5501] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 57.638013][ T5501] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 57.651158][ T5051] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 57.659606][ T5051] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 57.668524][ T5051] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 57.677105][ T5051] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 57.685513][ T5051] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 57.693788][ T5051] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 57.702032][ T5051] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 57.712848][ T5051] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 57.787352][ T5571] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 57.795987][ T5571] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 57.806471][ T5501] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.821507][ T5571] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 57.830673][ T5571] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 57.847903][ T5037] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 57.858504][ T5037] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 57.867625][ T5501] veth0_vlan: entered promiscuous mode [ 57.874777][ T5037] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 57.883345][ T5037] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 57.895062][ T5501] veth1_vlan: entered promiscuous mode [ 57.911361][ T5571] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 57.919735][ T5571] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 57.928287][ T5571] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 57.937055][ T5571] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 57.947931][ T5501] veth0_macvtap: entered promiscuous mode [ 57.955502][ T5501] veth1_macvtap: entered promiscuous mode [ 57.971617][ T5501] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.979624][ T5571] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 57.988732][ T5571] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 57.997201][ T5571] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 58.005618][ T5571] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 58.016682][ T5501] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.036839][ T5501] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.045736][ T5501] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.055694][ T5501] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.064817][ T5501] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.077022][ T5051] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 58.085995][ T5051] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 58.127818][ T65] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.135823][ T65] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.162836][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.164547][ T5050] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 58.177634][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.187701][ T5050] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 58.238808][ T5631] loop0: detected capacity change from 0 to 32768 [ 58.253236][ T5631] ================================================================================ [ 58.263833][ T5631] UBSAN: shift-out-of-bounds in fs/jfs/jfs_dmap.c:201:29 [ 58.272534][ T5631] shift exponent -1 is negative [ 58.277864][ T5631] CPU: 1 PID: 5631 Comm: syz-executor.0 Not tainted 6.2.0-syzkaller #0 [ 58.286092][ T5631] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 58.296136][ T5631] Call Trace: [ 58.299413][ T5631] [ 58.302335][ T5631] dump_stack_lvl+0x8a/0xa0 [ 58.306828][ T5631] __ubsan_handle_shift_out_of_bounds+0x156/0x2f0 [ 58.313230][ T5631] ? folio_unlock+0x50/0x80 [ 58.317719][ T5631] ? __get_metapage+0x391/0xec0 [ 58.322558][ T5631] ? kasan_set_track+0x21/0x30 [ 58.327310][ T5631] dbMount.cold+0x20/0x4a [ 58.331629][ T5631] jfs_mount+0x1fe/0x6e0 [ 58.335862][ T5631] ? new_inode+0x1bb/0x240 [ 58.340266][ T5631] jfs_fill_super+0x54f/0xbe0 [ 58.345016][ T5631] ? jfs_remount+0x5b0/0x5b0 [ 58.349593][ T5631] ? sget+0x3db/0x4d0 [ 58.353563][ T5631] mount_bdev+0x2cb/0x3b0 [ 58.357873][ T5631] ? jfs_remount+0x5b0/0x5b0 [ 58.362447][ T5631] ? jfs_get_dquots+0x10/0x10 [ 58.367127][ T5631] legacy_get_tree+0xfa/0x1f0 [ 58.371804][ T5631] vfs_get_tree+0x7f/0x320 [ 58.376478][ T5631] path_mount+0x829/0x1a20 [ 58.380887][ T5631] ? slab_free_freelist_hook+0x8b/0x1c0 [ 58.386429][ T5631] ? finish_automount+0x7c0/0x7c0 [ 58.391453][ T5631] ? kmem_cache_free+0xe8/0x4e0 [ 58.396308][ T5631] __x64_sys_mount+0x1f5/0x260 [ 58.401068][ T5631] ? copy_mnt_ns+0xa30/0xa30 [ 58.405659][ T5631] ? syscall_enter_from_user_mode+0x22/0xb0 [ 58.411549][ T5631] do_syscall_64+0x35/0xb0 [ 58.415963][ T5631] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 58.421856][ T5631] RIP: 0033:0x7f4bd6c8cada [ 58.426267][ T5631] Code: 48 c7 c2 b8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 58.445869][ T5631] RSP: 002b:00007f4bd7a1cf88 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 58.454276][ T5631] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 00007f4bd6c8cada [ 58.462241][ T5631] RDX: 0000000020000000 RSI: 0000000020000100 RDI: 00007f4bd7a1cfe0 [ 58.470199][ T5631] RBP: 00007f4bd7a1d020 R08: 00007f4bd7a1d020 R09: 0000000020000000 [ 58.478165][ T5631] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000020000000 [ 58.486125][ T5631] R13: 0000000020000100 R14: 00007f4bd7a1cfe0 R15: 0000000020005980 [ 58.494094][ T5631] [ 58.498337][ T48] Bluetooth: hci0: command 0x0409 tx timeout [ 58.506914][ T5631] ================================================================================ [ 58.516947][ T5631] Kernel panic - not syncing: UBSAN: panic_on_warn set ... [ 58.524147][ T5631] CPU: 1 PID: 5631 Comm: syz-executor.0 Not tainted 6.2.0-syzkaller #0 [ 58.532375][ T5631] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 58.542421][ T5631] Call Trace: [ 58.545700][ T5631] [ 58.548626][ T5631] dump_stack_lvl+0x60/0xa0 [ 58.553121][ T5631] panic+0x472/0x510 [ 58.557006][ T5631] ? panic_smp_self_stop+0x70/0x70 [ 58.562111][ T5631] ? syslog_print_all+0x300/0x300 [ 58.567135][ T5631] check_panic_on_warn+0x71/0x80 [ 58.572072][ T5631] __ubsan_handle_shift_out_of_bounds+0x17e/0x2f0 [ 58.578477][ T5631] ? folio_unlock+0x50/0x80 [ 58.582969][ T5631] ? __get_metapage+0x391/0xec0 [ 58.587808][ T5631] ? kasan_set_track+0x21/0x30 [ 58.592559][ T5631] dbMount.cold+0x20/0x4a [ 58.596875][ T5631] jfs_mount+0x1fe/0x6e0 [ 58.601105][ T5631] ? new_inode+0x1bb/0x240 [ 58.605506][ T5631] jfs_fill_super+0x54f/0xbe0 [ 58.610173][ T5631] ? jfs_remount+0x5b0/0x5b0 [ 58.614754][ T5631] ? sget+0x3db/0x4d0 [ 58.618724][ T5631] mount_bdev+0x2cb/0x3b0 [ 58.623037][ T5631] ? jfs_remount+0x5b0/0x5b0 [ 58.627616][ T5631] ? jfs_get_dquots+0x10/0x10 [ 58.632279][ T5631] legacy_get_tree+0xfa/0x1f0 [ 58.637033][ T5631] vfs_get_tree+0x7f/0x320 [ 58.641439][ T5631] path_mount+0x829/0x1a20 [ 58.645849][ T5631] ? slab_free_freelist_hook+0x8b/0x1c0 [ 58.651386][ T5631] ? finish_automount+0x7c0/0x7c0 [ 58.656401][ T5631] ? kmem_cache_free+0xe8/0x4e0 [ 58.661247][ T5631] __x64_sys_mount+0x1f5/0x260 [ 58.666003][ T5631] ? copy_mnt_ns+0xa30/0xa30 [ 58.670582][ T5631] ? syscall_enter_from_user_mode+0x22/0xb0 [ 58.676465][ T5631] do_syscall_64+0x35/0xb0 [ 58.680868][ T5631] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 58.686745][ T5631] RIP: 0033:0x7f4bd6c8cada [ 58.691150][ T5631] Code: 48 c7 c2 b8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 58.711115][ T5631] RSP: 002b:00007f4bd7a1cf88 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 58.719516][ T5631] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 00007f4bd6c8cada [ 58.727475][ T5631] RDX: 0000000020000000 RSI: 0000000020000100 RDI: 00007f4bd7a1cfe0 [ 58.735529][ T5631] RBP: 00007f4bd7a1d020 R08: 00007f4bd7a1d020 R09: 0000000020000000 [ 58.743494][ T5631] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000020000000 [ 58.751461][ T5631] R13: 0000000020000100 R14: 00007f4bd7a1cfe0 R15: 0000000020005980 [ 58.759436][ T5631] [ 58.763307][ T5631] Kernel Offset: disabled [ 58.767694][ T5631] Rebooting in 86400 seconds..